El1 Lead Cyber Security Adviser

Softtest Pays Pty Ltd; Canberra; Presencial; AUD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Softtest Pays Pty Ltd in Canberra is seeking a Cyber Security Engineer to provide professional advice, assurance and hands-on support across Digital Strategy projects. You will implement secure patterns, configure and validate security controls, and ensure alignment with Australian Government requirements.

Key duties include securing SharePoint Online records management, configuring Entra ID capabilities, and enabling Azure DevOps pipeline security and code assurance across projects with a focus

Formación

• Practical experience configuring Microsoft Entra ID and conditional access.
• Experience implementing secure authentication and authorization models.
• Familiarity with ISM, PSPF, Essential Eight, privacy and data protection obligations.

Responsabilidades

• Implement secure patterns across Digital Strategy projects, including configuration, testing and deployment readiness.
• Build and validate security controls, remediate gaps and produce artefacts for handover and operation.
• Implement secure SharePoint Online records management and integration with records processes.
• Configure Entra ID capabilities for secure authentication and access governance.
• Implement Azure DevOps pipeline security and code assurance measures with automated scanning and gates.
• Engineer secure patterns for Azure Foundry, AI accelerator and emerging tech solutions.
• Develop strategies for identity, access and data protection in remote/regional environments.
• Capture evidence against Australian Government cyber security requirements (ISM, PSPF, Essential Eight, privacy, supply chain).

Conocimientos

Cyber security experience

Identity and access management

Security governance

Cloud security

Herramientas

Microsoft Entra ID

Azure DevOps

SharePoint Online

Descripción del empleo

Australian Citizens with NV1 Clearance residing in Australia only respond.

Job details

The Information Technology and Data Division (ITDD) requires a Cyber Security Engineer to provide professional advice, assurance and hands‑on support across Digital Strategy projects, including:

• Cloud identity and access management using Microsoft Entra ID
• Records management (SharePoint Online)
• Remote and regional system resilience
• Azure DevOps pipelines and code assurance capabilities
• Azure Foundry and AI accelerator technologies

Key duties and responsibilities

The Cyber Security Engineer will be required to perform the following work:

• Implement secure technology patterns across Digital Strategy projects, including solution configuration, control implementation, testing, deployment support, transition to operations and operational readiness activities.
• Build, configure and validate security controls, remediate agreed gaps and produce implementation artefacts that support practical delivery, handover and ongoing maintenance.
• Implement secure SharePoint Online records management capabilities, including access models, retention and information protection settings, secure site patterns and integration with operational records processes.
• Configure Microsoft Entra ID capabilities for secure authentication, authorization and access governance, including conditional access, application access patterns and integration with cloud services.
• Implement Azure DevOps pipeline security and code assurance capabilities, including automated scanning, security gates, remediation workflows and secure release practices aligned to delivery teams' ways of working.
• Engineer secure implementation patterns for Azure Foundry, AI accelerator and emerging technology solutions.
• Develop strategies for identity, access, data protection and deployment considerations for remote and regional operating environments.
• Implement controls and capture evidence against relevant Australian Government cyber security requirements, including the ISM, PSPF, Essential Eight, privacy, data protection and supply chain security obligations.

Technical skills

Essential: Practical experience configuring Microsoft Entra ID, conditional access, application access patterns, cloud service integrations and secure authentication/authorisation models. Security control implementation and assurance: Ability to build, configure, test and validate security controls, remediate gaps, produce implementation artefacts and support transition to operations. Working knowledge of the ISM, PSPF, Essential Eight, privacy, data protection and supply chain obligations.